Internet Requirements for a VPN Tunnel

[terri8369]

We are having issues with many of our vpn tunnels, they are going up and down almost constantly. We are wondering if it may be due to inadequate internet services. Does anyone know what the minimum internet requirements would be for a stable tunnel? Do they have to have the same up/down speed? Do they have to have the same speed as the connection they are peering to? We have 25 up and 5 down at the remote locations and at the peer point (but are getting ready to change the peer to 200/200). Thoughts? Does anyone have any idea where I might find articles on it?

Any insight is appreciated.

[ShadowPeak.com]

We are having issues with many of our vpn tunnels, they are going up and down almost constantly. We are wondering if it may be due to inadequate internet services. Does anyone know what the minimum internet requirements would be for a stable tunnel? Do they have to have the same up/down speed? Do they have to have the same speed as the connection they are peering to? We have 25 up and 5 down at the remote locations and at the peer point (but are getting ready to change the peer to 200/200). Thoughts? Does anyone have any idea where I might find articles on it?

Any insight is appreciated.

Up/down speeds should not matter unless there is ridiculously high jitter and/or packet loss. The only ports that typically need to be passed are UDP/500, ESP (IP Proto 50) and perhaps UDP/4500 if NAT is present between the two endpoints.

More likely culprits for tunnels dying prematurely are mismatched Phase 1 and Phase 2 SA Lifetimes, mismatched or nonexistent Data Size Lifetimes, or the use of a VPN Idle timer on on side. If the VPN is between a Check Point and any other vendor, Delete SAs don't seem to work.properly so anything that brings the tunnel down early will cause the tunnel.to hang..

If you could post some more details of what you are seeing I can diagnose further.